[Secure-testing-commits] r9823 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-09-15 10:02:46 +0000 (Mon, 15 Sep 2008)
New Revision: 9823

Modified:
   data/CVE/list
Log:
Add information for ruby issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-09-15 09:34:19 UTC (rev 9822)
+++ data/CVE/list	2008-09-15 10:02:46 UTC (rev 9823)
@@ -205,7 +205,8 @@
 CVE-2008-3906 (CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows ...)
 	- mono <unfixed> (low; bug #498894)
 CVE-2008-3905 (resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 ...)
-	TODO: check
+	- ruby1.8 1.8.7.72-1 (bug #498978)
+	- ruby1.9 <unfixed> (bug #498977)
 CVE-2008-3903 (Asterisk PBX 1.2 through 1.6 and Trixbox PBX 2.6.1, when running with ...)
 	TODO: check
 CVE-2008-3902 (HP firmware 68DTT F.0D stores pre-boot authentication passwords in the ...)